Skip to content
OpenAdvisories

Product · NewType

FlowMaster BPM Plus

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-9971

    NewType FlowMaster BPM Plus - SQL Injection

    The specific query functionality in the FlowMaster BPM Plus from NewType does not properly restrict user input, allowing remote attackers with regular privileges to inject SQL commands to read, modify, or delete database contents.

    NewType FlowMaster BPM Plus
  • High 8.8
    CVE-2024-9970

    NewType FlowMaster BPM Plus - Privilege Escalation

    The FlowMaster BPM Plus system from NewType has a privilege escalation vulnerability. Remote attackers with regular privileges can elevate their privileges to administrator by tampering with a specific cookie.

    NewType FlowMaster BPM Plus